Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
File:                     373B103C68D9B84455801815E437C49839794406.mft (raw, json)
Hash identifier:          O4UgKWGkqChF9rEvbuTSgdnlzD6rDziNlUG+7uO4/T8=
Subject key identifier:   F3:79:48:AA:8B:7E:3F:01:76:24:57:1A:34:94:04:56:C5:6F:DD:55
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Certificate issuer:       /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial:       7F82684F85F5386FCBC5A6B479616CC9B115EDD2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
Manifest number:          76
Signing time:             Fri 17 Apr 2026 08:52:44 +0000
Manifest this update:     Fri 17 Apr 2026 08:47:44 +0000
Manifest next update:     Sat 18 Apr 2026 11:25:44 +0000
Files and hashes:         1: 3131332e31382e3139392e302f32342d3234203d3e2039383038.roa (hash: 26xHgpFQwzdYak11Uk8qGZoi6F5obP9Yhc9faJO/AC0=)
                          2: 3131302e3233372e302e302f31362d3136203d3e2039383038.roa (hash: xFtnh6XjWsHSoRFqwMT0dAdbo39z/4IBEm/NltK9l5A=)
                          3: 3131332e31382e3133302e302f32342d3234203d3e2039383038.roa (hash: zDOWeX9XcM9h2tJJRyjYjzukX9m6ydEOUWtBszIYs2I=)
                          4: 3131332e31382e39362e302f32312d3231203d3e2039383038.roa (hash: iCZ13LdMCPsgPGenpU0yejivjXbu4w697cmHXIMKfvM=)
                          5: 3138322e3135372e302e302f31362d3136203d3e2039383038.roa (hash: bb97oY6zPLsKhBLVa0rQlewA3WGo8q51y04BsHtNgQM=)
                          6: 3131332e31382e3133332e302f32342d3234203d3e2039383038.roa (hash: FtaOncl8hw6IqyiRnTLeAIANe8pxQIcBCMKVNk8hJq4=)
                          7: 3131332e31382e302e302f31362d3136203d3e2039383038.roa (hash: l2TtlQd2OeYBccu9u8JTA5koymL/HDwH4svd8KIbs00=)
                          8: 3131302e3233362e302e302f31352d3135203d3e2039383038.roa (hash: hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=)
                          9: 373B103C68D9B84455801815E437C49839794406.crl (hash: VxTxf6/WWtsnnxyIkOZIZrJLUissiItKPErjDRsHry0=)
                          10: 3131332e31382e31342e302f32342d3234203d3e2039383038.roa (hash: 183ULC9/kaSgPwl7ZAYMU6Iku02TWWBKGblJeSTj3uA=)
                          11: 3131302e3233362e302e302f31362d3136203d3e2039383038.roa (hash: ypOszjBaxK7aN3qHrAMdQaOEEef+WU0nK8BVdjeedMs=)
                          12: 3131332e31382e3130302e302f32342d3234203d3e2039383038.roa (hash: 0vZ31zN+cOViGpd7YcM9R6wPzZDDWAwBfSOU88Ao/UU=)
                          13: 3131332e31382e3132382e302f32342d3234203d3e2039383038.roa (hash: 9AsiBmigy2vbYDDQyZ6WOWkfNuChEfj5I7lasWP8F84=)
                          14: 3131332e31382e39392e302f32342d3234203d3e2039383038.roa (hash: 9Y/sDtotXoDlI/YObldvB0C9bHYM+ONtY/ovPI1/CXw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 11:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:82:68:4f:85:f5:38:6f:cb:c5:a6:b4:79:61:6c:c9:b1:15:ed:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373B103C68D9B84455801815E437C49839794406
        Validity
            Not Before: Apr 17 08:47:44 2026 GMT
            Not After : Apr 18 11:25:44 2026 GMT
        Subject: CN=F37948AA8B7E3F017624571A34940456C56FDD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:b9:9b:53:91:e0:6c:d8:27:3e:a7:c1:47:
                    42:fe:df:72:ad:78:46:a1:6e:9b:46:a0:df:fb:c4:
                    70:cc:3b:fb:d6:7c:86:df:3e:8c:dc:65:5d:fd:a1:
                    b8:aa:e9:44:78:55:7d:fe:65:0b:35:3d:d1:c0:ba:
                    3b:8d:30:b1:83:55:a2:61:18:ca:36:30:0f:bc:00:
                    6b:4e:9e:61:f4:84:d8:96:f4:21:c7:28:2a:d4:2f:
                    93:b0:3c:bf:7e:51:e9:d7:d7:eb:a7:bc:8f:c3:e2:
                    65:8d:d0:c5:36:d0:43:74:56:93:4d:49:3c:df:2c:
                    fd:00:be:f1:a2:8e:27:62:a9:ac:3a:83:20:a7:f9:
                    ab:26:05:1b:7a:77:85:b9:97:42:d5:36:fb:64:5f:
                    05:6d:a8:c8:ba:68:83:77:2e:1c:08:2e:3f:b8:c9:
                    7c:9c:0e:95:57:6c:25:24:e5:c1:bd:26:68:c7:ee:
                    24:a2:68:32:47:d0:52:50:27:2f:9d:46:07:8e:3e:
                    bf:2f:29:02:e7:74:20:c7:c9:90:35:a8:48:aa:51:
                    d4:76:58:23:ab:be:2a:14:1f:61:50:62:65:22:97:
                    c0:89:14:0b:22:b9:a6:b2:9c:39:73:4f:64:7f:71:
                    07:21:59:fa:5a:49:dc:be:8f:f7:76:f1:be:bd:a4:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:79:48:AA:8B:7E:3F:01:76:24:57:1A:34:94:04:56:C5:6F:DD:55
            X509v3 Authority Key Identifier:
                keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:9e:fc:e5:36:42:2d:96:be:63:79:05:a5:0e:dd:6d:be:
         90:6e:af:d6:b1:ba:fa:2e:64:09:b4:85:a1:b4:99:11:65:e4:
         60:b7:5f:0b:bf:6e:6c:72:9a:62:17:5e:35:2c:23:b8:5d:db:
         fa:9f:53:4e:8e:92:2a:5e:03:0f:f9:cd:5b:6a:3b:25:f7:cc:
         6a:5b:f4:67:78:47:29:2a:a9:86:c5:0b:97:1e:91:53:9d:1f:
         07:7b:bf:cc:22:8c:99:39:1b:19:22:86:ce:87:cc:3a:4f:a3:
         ab:6e:fe:8e:2c:56:ed:50:a4:a4:6a:59:76:3b:79:63:1f:58:
         5c:b6:db:dd:cd:90:16:1b:42:08:ad:e9:f2:f8:ff:ce:d6:38:
         d6:04:bd:15:cf:3b:39:59:0e:44:e1:2e:25:21:bc:29:47:48:
         ec:da:da:74:ad:bc:6e:9e:86:bb:a0:71:19:8d:d6:6b:1e:cd:
         7e:dd:46:c2:84:a4:71:5c:01:5e:37:76:95:6e:44:96:20:55:
         5b:f3:8c:fc:80:6c:d8:cd:16:20:95:aa:4f:d7:ed:19:32:42:
         0b:68:72:89:c4:68:a8:e1:76:95:dd:b5:02:bf:42:4f:cc:ad:
         7e:a7:46:53:58:cc:cb:3c:28:cf:dc:1b:ae:30:9b:2a:7a:4d:
         7e:4a:22:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:19 2026 by rpki-client